Site-to-Site VPN: Cisco 877m/Sonicwall

Caporegime
Joined
26 Aug 2003
Posts
37,508
Location
Leafy Cheshire
I'm currently trying to set up a site-to-site VPN between my 877m (Running Advanced IP Services IOS), and work's Sonicwall PRO 3060 (running Enhanced OS), using a Pre-Shared IKE key.

I can get my 877m to connect site-to-site with an 837, and we have the Sonicwall connected site-to-site with another Sonicwall, and some cruddy consumer-grade router, but no matter what I do, I can't get my link up.

It is probably something incredibly simple that I'm missing, but does anyone have any ideas?
 
hmmm, have you got the preshare key / IP addresses correct for the end points - make sure that PFS is disabled?

Are you getting phase one complete messages?
debug crypto isakmp and debug crypto ipsec commands should help you out, also the show crypto ipsec sa and sh crypto isakmp (with sub options) will also help.

Hope I'm not teaching you to suck eggs, but it's stuff I found useful....

Kev
 
Back
Top Bottom